A multi-tenant assistant searches a shared corpus. Which two controls should be part of its isolation design? Select 2 answers.

1. Enforce tenant authorization before returning source content to the agent.
2. Scope caches and conversation memory by the relevant tenant and user identity.
3. Retrieve all tenants' documents and ask the model not to mention the others.
4. Use an identical unrestricted cache key for every user question.
5. Treat document relevance scores as proof of permission.